Cyber Threat Intelligence Analyst-Public Trust Clearance required

Cyber Threat Intelligence Analyst

Northern Virginia

The Senior Cyber Threat Intelligence Analyst is responsible for collecting, analyzing, and disseminating actionable intelligence to support enterprise cybersecurity operations, fraud prevention, and risk mitigation. This role proactively identifies emerging cyber threats, fraud campaigns, dark web activity, insider threats, and brand misuse that could impact organizational assets, personnel, or operations.

The ideal candidate possesses extensive experience conducting cyber threat intelligence analysis, monitoring dark web activity, identifying fraud indicators, and producing operational and executive-level intelligence reporting. This individual will collaborate closely with Security Operations, Incident Response, Threat Hunting, Vulnerability Management, and executive leadership to ensure intelligence is integrated into defensive operations and strategic decision-making.

Cyber Threat Intelligence

• Collect, analyze, correlate, enrich, and disseminate actionable cyber threat intelligence from commercial, open-source, government, and proprietary intelligence sources.
• Produce timely intelligence products supporting cybersecurity operations, executive leadership, and mission stakeholders.
• Identify emerging cyber threats, adversary tactics, techniques, and procedures (TTPs), and evaluate their potential impact to the organization.
• Maintain threat intelligence processes, workflows, and standard operating procedures to support continuous intelligence operations.

Fraud Intelligence & Dark Web Monitoring

• Monitor dark web forums, marketplaces, messaging platforms, and underground communities for indicators of fraud, credential theft, data leakage, and criminal activity targeting the organization.
• Identify emerging fraud schemes, financial crime trends, phishing campaigns, and identity-based attacks relevant to federal operations.
• Analyze criminal infrastructure and threat actor activity to identify risks before they impact organizational assets.
• Develop intelligence products that help detect, prevent, and mitigate fraud targeting bureau systems, services, and customers.
• Support fraud reporting and intelligence-sharing processes in accordance with Bureau of the Fiscal Service (BFS) requirements and established reporting mechanisms.

Brand Protection & Threat Monitoring

• Monitor organizational brands, domains, and digital assets for misuse, impersonation, phishing, counterfeit activity, and unauthorized use.
• Investigate potential brand abuse incidents and recommend mitigation strategies.
• Coordinate with appropriate stakeholders to support brand protection activities, including takedown requests for malicious or unauthorized content.
• Monitor cyber, insider, physical, and environmental threats that could impact enterprise operations.

Operational Intelligence Support

• Integrate threat intelligence into Security Operations Center (SOC), Incident Response, Threat Hunting, Vulnerability Management, and Security Fusion Center activities.
• Provide intelligence support during cybersecurity investigations and incident response activities.
• Develop actionable recommendations that improve detection capabilities and reduce organizational risk.
• Collaborate with cross-functional teams to improve intelligence-driven security operations.

Artificial Intelligence & Threat Intelligence Automation

• Leverage Artificial Intelligence (AI) and automation technologies to improve threat intelligence collection, enrichment, prioritization, and analysis.
• Research emerging AI-enabled threat intelligence platforms and security operations capabilities.
• Evaluate opportunities to automate intelligence workflows using multi-source threat feeds and advanced analytics.
• Provide recommendations on integrating AI into cybersecurity operations while supporting responsible and secure implementation practices.

Reporting & Briefings

• Produce technical intelligence reports, executive summaries, threat assessments, and operational briefings.
• Communicate complex threat information to technical and non-technical audiences.
• Develop actionable recommendations based on intelligence findings to improve…